Regulation, safety, and governance
The Guardrails
I think the people who smashed roughly 20 windows at Mila this week did more damage to the case against AI than to the institute — and that the labs they were angry at are the ones who benefit from the mess. Start with what actually happened, because the details decide
The Guardrails
Two stories about who can read the code you hand your agent — one from a developer who found the upload on his own disk, one from a government website that outsourced search to a model Washington has spent the month accusing. Z.ai's coding agent ZCode was packing
The Guardrails
A security startup used one lab's newest model to walk into its rival's internal code repositories, and did it in under three days from first probe to finished chain. The mechanics are worth reading. The economics are the part that should change how you budget. Hacktron
The Guardrails
Two stories about the same thing from opposite ends: a security firm used one lab's models to break into its rival, and a coding agent got a feature for finding what the humans never got around to looking for. Plus a local-inference release that argues the number
The Guardrails
A zero-click remote code execution flaw has been found in all four major AI coding agents — and the part that should worry enterprises is that doing everything right does not defend against it. Air, a security startup that guards enterprise AI agents, disclosed Plugin4Shell on September 17: a flaw
The Guardrails
A NATO-backed startup has put the whole targeting decision inside a small drone — detection, ranking, and the attack run — with a human able to steer but no longer required to. Scaleout Systems, a Swedish company spun out of Uppsala University in 2018, showed the capability under the ALMA project
The Guardrails
Thursday's through-line was self-reporting. One lab published numbers on how much of its own research its model now performs; another published six accounts of its models misbehaving; a security firm showed that a provenance watermark changes what an agent actually executes. Around all of it, the
The Guardrails
Anthropic published the first public numbers on how much of its own AI research its model now performs — and separately, the enterprise market is already selling the fix for agents that misbehave. Both stories are the same problem seen from inside a lab and from the buyer's side.
The Guardrails
Two stories today about AI meeting records that already exist — one in a federal courtroom, one inside the UN's statistics division. Newly unredacted filings in The New York Times' three-year copyright suit show Microsoft's own leadership privately described AI training on scraped content as
The Guardrails
California Gov. Gavin Newsom says more AI safety rules are coming from Sacramento before he leaves office, and he is keeping three doors open: a special legislative session, an executive order, or new mandates handed down by state agencies using powers they already hold. Newsom told POLITICO he is working
The Guardrails
Two pieces of AI plumbing moved today: the invisible provenance layer sitting on top of frontier models turns out to change how they behave, and Anthropic quietly put a team of agents behind a single Claude Code project. A watermark is supposed to be a stamp, not a steering wheel.
The Guardrails
Three stories about accountability today: what a lab owes the public when its models misbehave, what investors pay for a frontier team with no product, and who writes the safety rules for open models. OpenAI published its first formal framework for reporting model misalignment on Wednesday, and used it to